No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by hrconsultnj · MCP Server · ★ 71
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is claude-plugins safe to install? View the security audit →
Composure A plugin system for Claude Code that catches architecture, security, and quality issues inline — before they reach a commit. Claude writes code fast. Composure makes sure it writes it right — enforcement hooks that run outside the model at zero token cost, architecture skills that load current patterns instead of stale training data, and a structural code graph that understands your whole project. Docs, account, and full reference → composure-pro.com This repository is the public home for Composure — the showcase, use-cases, and where you file issues and pull requests. The plugins are distributed as a built artifact (see Install); the source lives in a separate maintained repository. Install One command — fresh install or update, macOS / Linux / Windows: It installs the suite, authenticates your account in the browser, and sets up . (/ also work.) Already inside Claude Code? Run to bring everything current. Then initialize in any project: Detects your stack, builds the code graph, and pulls in the companion plugins your project needs. What's in the suite | Composure
| Stars | 71 |
| Forks | 9 |
| Language | HTML |
| Category | MCP Server |
| Quality Score | 65.6934749836468/100 |
| Open Issues | 1 |
| Last Updated | 2026-08-01 |
| Created | 2026-03-20 |
| Platforms | claude-code, mcp |
| Est. Tokens | ~448k |
These tools work well together with claude-plugins for enhanced workflows:
Looking for a claude-plugins alternative? If you're comparing claude-plugins with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
The code quality toolkit for the agentic AI era. Find dead code, clones, and scaffolding across 15 languages.
The Complete AI Development Toolkit for Claude Code. 106 skills, 36 agents, 171 hooks. Install `ork` for stabl
MCP Fusion - The framework for AI-native MCP servers.
📜 An MCP server for conversation history search and retrieval in Claude Code
AI-powered code quality analysis using MCP to help AI assistants review code more effectively. Analyze git cha
Governance gateway for AI agents — bounded, auditable, session-aware control with MCP proxy, shell proxy & HTT
Explore other popular mcp server tools:
claude-plugins is Claude Code plugin — code quality hooks, knowledge graph, impact-aware reviews, decomposition enforcement. Babysitter for your AI's code quality.. It is categorized as a MCP Server with 71 GitHub stars.
claude-plugins is primarily written in HTML. It covers topics such as ai-tools, claude-code, claude-code-plugin.
You can find installation instructions and usage details in the claude-plugins GitHub repository at github.com/hrconsultnj/claude-plugins. The project has 71 stars and 9 forks, indicating an active community.
The top alternatives to claude-plugins on Agent Skills Hub include fossil-mcp, orchestkit, mcp-fusion. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: